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DETAILED ACTION 
Information Disclosure Statement 

1 . The information disclosure statement filed on 4/23/04 fails to comply with 37 CFR 
1 .98(a)(1), which requires a list of all patents, publications, or other information 
submitted for consideration by the Office. It has been placed in the application file, but 
the information referred to therein has not been considered. Applicant needs to submit 
the Form PTO-1449. 



Response to Arguments 

2. Applicant points out that the cover sheet of the previous Office Action indicates that 
claims 12,13 and 64 have been objected to. This was indicated in error and there were 
no objection to the instant claims in the text of the Office Action. 

3. Applicant *s arguments with regards to the indefinite nature of the claims 13 and 64 
are persuasive. The rejections of claims 13 and 64 under 35 USC §112 are withdrawn. 

4. Applicant's amendment of the independent claim 1 reflects " transmitting a web 
page comprising HTTP request...". Applicant states that this limitation is not taught by 
Levergood. Examiner respectfully disagrees and points out that this feature is explicitly 
taught in Levergood in col 6, line 23-24. Examiner points out that the client browser can 
only receive a request in a form of a web page. 

5. Referring to claim 12, Applicant argues that Levergood does not teach or suggest 
how the secret is shared between the devices. Examiner points out that sharing the key 
is an inherent feature for exchanging encrypted information between the devices. 
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Further more Levergood does explicitly teach sharing secret key between the 
authentication and content servers (see col. 5). 

6. Referring to claims 24, 33, 44, Applicant points out the differences between claimed 
invention and teachings of Levergood. Examiner points out that while the technical 
differences may exist, they are not adequately reflected in the claims. 

Examiner also points out that the broad but reasonable interpretation of the claim 
language is applied. 

7. Referring to claim 54, Applican points out that Levergood does not explicitly teach 
that users are buying the documents. Examiner agrees, but points out that it would be 
inherent to have a purchase transaction of the content validated before initiating the 
transaction of information. 



Drawings 

8. The formal drawings filed with the application are approved by examiner. 

Claim Rejections - 35 USC § 102 

9. The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that 
form the basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless- 

(b) the invention was patented or described in a printed publication in this or a foreign country or 
in public use or on sale in this country, more than one year prior to the date of application for 
patent in the United States. 
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10. Claims 1 -4, 6-9. 1 1 -27, 30-50. 52-54, 56-61 , 63-64 are rejected under 35 
U.S.C. 102(b) as being anticipated by Levergood et al. (US Patent 5.708.780; 
"Levergood" hereinafter). 

Regarding claim 1 . Levergood discloses a method of communicating with a first 
computing device, said method comprising the acts of: 

encrypting information (SID) destined for said first computing device (col 5, line 
54-60; content server is the first computing device); 

creating an HTTP request which includes an address of said first device and the 
encrypted information (col 6, line 20-22 http://content.conn/[SID]/report); 

transmitting a web page comprising the HTTP request to a second computing 
device different from said first computing device (col 6, line 23-24; client browser is the 
second computing device, content server is the first computing device). 

Regarding claim 2, Levergood discloses HTTP request comprises a POST 
request, and wherein said encrypted infornnation is included in the body of said POST 
request (col 7, line 7-11). 

Regarding claim 3. Levergood discloses HTTP request comprises a GET 
request, and wherein said encrypted information is appended to said GET request as a 
parameter (col 5, line 32-33; col 5, line 53-54). 

Regarding claim 4, Levergood discloses said information is encrypted using a 
symmetric key (col 5, line 64 secret key). 

Regarding claim 5, Levergood discloses the act of creating a web page which 
includes a hyperlink associated with said HTTP request, wherein said transmitting act 
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comprises transmitting said web page to said second computing device (col 6, line 
2324). 

Regarding claim 6, Levergood discloses the second computing device is 
associated with a purchaser of content (col 8, line 61-62), wherein said first computing 
device provides said content (col 5, line 40-41), and wherein the encrypted information 
includes information relating to the purchase of said content (col 5, line 54-60). 

Regarding claim 7, Levergood discloses the encrypted information includes 
information which identifies said purchaser (col 5, line 60 user identifier). 

Regarding claim 8, Levergood discloses the encrypted information includes a 
timestamp (col 5, line 57 expiration date). 

Regarding claim 9, Levergood discloses acts of computing a hash of said 
information prior to encryption; and including said hash in said HTTP request (col 5, line 
62). 

Regarding claim 11, Levergood discloses a computer readable medium having 
computer-executable instructions to perform the method of claim 1 (col 4, line 24-28). 

Regarding claim 12, Levergood discloses a method of communicating with a first 
computing device through a second computing device, said method comprising the acts 
of: 

encrypting information such that the encrypted information is decryptable by a 
secret (col 6, line 8; SID); 

transmitting the encrypted information to said second computing device, said 
encrypted information being transmittable to said first computing device upon instruction 
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from a user operating said second computing device, wherein said secret is not 
accessible to either said second computing device or said user (col 3. line 1 1-20; first 
computing device is content server, second computing device is client browser); 

sharing said secret by performing either of the following acts: providing said 
secret to said first computing device or to a party associated with said first computing 
device; or receiving said secret from said first computing device or from a party 
associated with said first computing device (col 5, line 64-65). 

Regarding claim 13, Levergood discloses first computing device is associated 
with a purchaser of content (col 8, line 61-63), and wherein said second computing 
device provides said content (col 3, line 11-16). 

Regarding claim 14, Levergood discloses the encrypted information includes 
information relating to the purchase of said content (col 5, line 54-61) 

Regarding claim 15, Levergood discloses transmitting the encrypted information 
over a wide-area network (col 3, line 12). 

Regarding claim 16, Levergood discloses wide-area network comprises the 
Internet (col 8, line 63). 

Regarding claim 17, Levergood discloses transmitting act comprises transmitting 
to said second computing device an HTTP request which includes an address of said 
first computing device and the encrypted information (col 3, line 11-15). 

Regarding claim 18, Levergood discloses HTTP request comprises a POST 
request, and wherein said encrypted information is included in the body of said POST 
request (col 7, line 7-1 1 ), 
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Regarding claim 19, Levergood discloses HTTP request comprises a GET 
request, and wherein said encrypted information is appended to said GET request as a 
parameter (col 5, line 32-33; col 5, line 53-54). 

Regarding claim 20, Levergood discloses the act of creating a web page which 
includes a link associated with said HTTP request, wherein said transmitting act 
comprising transmitting said web page to said second computing device, and wherein 
the user instruction to transmit the encrypted information to said first computing device 
comprises the user using an input device associated with said second computing device 
to actuate said link (col 9, line 13-20). 

Regarding claim 21, Levergood discloses encrypting said information with said 
symmetric key (col 5, line 64 secret key). 

Regarding claim 22, Levergood discloses including a timestamp in the encrypted 
information (col 3, line 34). 

Regarding claim 23, Levergood discloses appending a hash of said information 
to said encrypted information, said hash being computed prior to encryption of said 
information (col 3, line 37). 

Regarding claim 24, Levergood discloses a method of facilitating electronic 
content distribution comprising the acts of: 

providing, to a first party for use on a first computing device, a first set of 
computer-executable instructions which encrypts information based on a unique id that 
maps into a shared secret, the encrypted information being includable in an HTTP 
request which includes a network address of a second computing device (col 5, line 54- 
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65; first computing device is authentication server, second computing device is content 
server); 

providing, to a second party for use on said second computing device, a second 
set of computer-executable instructions which decrypts the encrypted information (col 6, 
line 21-26). 

Regarding claim 25, Levergood discloses said first party comprises a seller of 
electronic content (col 8, line 61-62, the user may purchase the subscription to gain 
access to document), wherein said second party comprises a provider of electronic 
content sold by said first party (content server provides information), and wherein said 
encrypted information relates to a transaction between said first party and a consumer 
of electronic content (SID) 

Regarding claim 26, Levergood discloses HTTP request comprises a POST 
request, and wherein said encrypted information is included in the body of said POST 
request (col 7, line 7-11). 

Regarding claim 27, Levergood disclioses HTTP request comprises a GET 
request, and wherein said encrypted information is appended to said GET request as a 
parameter (col 5, line 32-33; col 5, line 53-54). 

Regarding claim 30, Levergood discloses said secret symmetric key to encrypt 
said information (col 5, line 64). 

Regarding claim 31, Levergood discloses wherein said information includes 
information identifying an item of content, which said second computing device provides 
(col 3, line 59-60). 
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Regarding clainn 32, Levergood discloses wherein said information includes 
information identifying a purchaser of an item of content (col col 5, line 60). 

Regarding claim 33, Levergood discloses a method of building a client-server 
request, said method comprising the acts of: 

encrypting first information so as to be decryptable by a secret accessible to a 
first server (col 3, line 12-16; the first server is the content server); 

including an address associated with said first server in said client-server request 
(col 3, line 12-16); 

including the encrypted information in said client-server request (col 3, line 12-16; 
col 7, line 21-34). 

Regarding claim 34, Levergood discloses wherein the encrypted information 
includes information relating to a transaction to purchase a content item, wherein said 
first server furthers at least some aspect of said transaction (col 8, line 31-33). 

Regarding claim 35, Levergood discloses wherein the encrypted information 
includes information which identifies a purchaser of said content item (col 8, line 2). 

Regarding claim 36, Levergood discloses wherein the encrypted information 
includes information which identifies said content item (col 8, line 3). 

Regarding claim 37, Levergood discloses wherein the encrypted information 
includes a timestamp (col 8, line 3). 

Regarding claim 38, Levergood discloses wherein said first server provides said 
content item (col 8, line 11-13; Fig 3, ItemlO). 
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Regarding clainn 39. Levergood discloses then encrypted infornnation is 
generated by encrypting cleartext infornnation with said symmetric key (col 5, line 64). 

Regarding claim 40, Levergood discloses client-server request comprises an 
HTTP request (col 7, line 24-34). 

Regarding claim 41, Levergood discloses wherein said HTTP request comprises 
a POST request, and wherein the encrypted information is included in the body of said 
POST request (col 7, line 25-27). 

Regarding claim 42, Levergood discloses wherein said HTTP request comprises 
a GET request, and wherein the encrypted information is appended to said GET request 
as a parameter (col 7, line 29-34). 

Regarding claim 43, Levergood discloses a computer-readable medium having 
computer-executable instructions to perform the method of claim 33 (col 4, line 26). 

Regarding claim 44, Levergood discloses a method of distributing electronic 
content, said method comprising the acts of: 

receiving, at a first computing device (authentication server) from a second 
computing device (client browser), an order for a content item (col 8, line 61-63); 

providing, from said first: computing device to said second computing device, 
data comprising: a network address of a third computing device (content server); and 
encrypted information (SID); wherein said third computing device processes said order 
by using at least some of said encrypted information (col 5, line 4749). 
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Regarding claim 45, Levergood discloses wherein said data comprises an HTTP 
POST request, and wherein said encrypted information is included in the body of said 
POST request (col 7, line 7-11). 

Regarding claim 46, Levergood discloses wherein said data comprises an HTTP 
GET request (col 5, line 32-33; col 5, line 53-54). 

Regarding claim 47, Levergood discloses wherein said encrypted information 
includes information identifying said content item (col 5, line 54-61). 

Regarding claim 48, Levergood discloses wherein said encrypted information 
includes information identifying the individual who issued said order for said content 
item (col 5, line 59-60). 

Regarding claim 49, Levergood discloses wherein said encrypted information 
includes a timestamp (col 5, line 57). 

Regarding claim 50, Levergood discloses wherein said data further comprises a 
hash of said encrypted information, said hash being computed prior to encryption of 
said information (col 5, line 62). 

Regarding claim 52, Levergood discloses wherein said content item does not 
reside on said first computing device (col 5, line 59). 

Regarding claim 53, Levergood discloses a computer-readable medium having 
computer-executable instructions to perform the method of claim 44 (col 4, line 24-28). 

Regarding claim 54, Levergood discloses a computer-readable medium having 
computer-executable instructions for performing steps comprising: 
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receiving parameters that identify characteristics of a first transaction between a 
first client and a first server (col 5, line 49, the parameter is SID, first client is client 
browser, first server is authentication server); 

encrypting one or more of said parameters (col 5, line 64, encrypted with a secret 
key which is shared by the authentication and content servers); 

returning said encrypted parameters to said first client in a format such that a 
second server may receive said encrypted parameters from said first client (col 3, line 
16-20), validate said first transaction, and initiate a second transaction without any 
interaction with said first server (Fig 2A, Item 100 Get URL through Item 106, second 
server is content server). 

Regarding claim 56, Levergood discloses wherein said first transaction relates to 
the sale of electronic content (col 8, line 62). 

Regarding claim 57, Levergood discloses wherein said second transaction 
comprises downloading ;said electronic content from said second server to said first 
client (Fig 2A, Item Browser/Display). 

Regarding claim 58, Levergood discloses wherein said parameters comprise 
end-use information that enables the individualization of said electronic content (col 5, 
line 59, a set of information file). 

Regarding claim 59, Levergood discloses wherein said parameters include one 
or more of the following: information identifying a party to said first transaction, and 
information identifying an item purchased in said first transaction (col 5, line 54-61, user 
identifier). 
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Regarding claim 60, Levergood discloses containing a timestamp in encrypted 
parameter (col 5, line 57) 

Regarding claim 61 , Levergood discloses wherein said steps further comprise 
computing a hash of at least some of said encrypted parameters (col 5, line 62, hash). 

Regarding claim 63, Levergood discloses wherein said encrypting act comprises 
applying a secret symmetric key shared between said first server and said second 
server (col 5, line 64-65) 

Regarding claim 64, Levergood discloses wherein said format comprises an 
HTTP request including an address of said first server (col 5, line 54 
http://content.com/fSID1/report ). 

Claim Rejections - 35 USC § 103 

1 1 . The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as 
set forth in section 102 of this title, if the differences between the subject matter sought to be 
patented and the prior art are such that the subject matter as a whole would have been obvious 
at the time the invention was made to a person having ordinary skill in the art to which said 
subject matter pertains. Patentability shall not be negatived by the manner in which the invention 
was made. 

12. Claims 28-29, 55 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Levergood et ai. (US Patent 5,708,780, "Levergood" hereinafter) in view of Barnes 
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et al. (US Patent 5,970.475, "Barnes" hereinafter). 

Regarding claims 28-29, 55, Levergood discloses computer-executable 
instructions which encrypts information. Levergood fails to teach using COM object to 
perform the job. Barnes teaches the EC system core functionality is implemented using 
many Microsoft's component object model (COM) for the purpose of providing a specific 
function role and providing a function interface that can be accessed by other COM 
objects or COM-enabled processes (col 10, line 51-56). It would have been obvious to a 
person of ordinary skill in the art at the time of the applicant's invention was made to 
implement computer-executable instructions as COM object. 

13. Claims 10, 51, 62 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Levergood et al. (US Patent 5,708,780, "Levergood" hereinafter) in view of 
Eberhard et al. (US Pub. 2001 1001 1238 Al, "Eberhard" hereinafter). 

Regarding claims 10, 51, 62, Levergood discloses hashing the encrypted 
information. Levergood fails to teach hashing the encrypted information using an SHA1 
algorithm. Eberhard teaches hashing parameters by using a SHA1 algorithm to 
calculate a hash for a title file downloaded from the publisher's server for the purpose of 
maintaining integrity, doing comparison before the purchased title being downloaded 
(page 4, block 40-42). It would have been obvious to a person of ordinary skill in the art 
at the time of the applicant's invention was made to use SHA1 algorithm to maintain 
data integrity. 
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Conclusion 

14. THIS ACTION IS MADE FINAL. Applicant is reminded of the extension of time 
policy as set forth in 37 CFR 1 .136(a). 

A shortened statutory period for reply to this final action Is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action Is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action Is mailed, and any 
extension fee pursuant to 37 CFR 1 .136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the mailing date of this final action. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Grigory Gurshman whose telephone number is (703) 
306-2900. The examiner can normally be reached on 9 AM-5:30 PM. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Gilberto Barron can be reached on (703) 305-1830. The fax phone number 
for the organization where this application or proceeding Is assigned Is 703-872-9306. 



Application/Control Number: 09/604,944 



Page 16 



Art Unit: 2132 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status Information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status Information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-dlrect.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). 




Grigory Gurshman 

Examiner 
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